Scan "*"

Application summary

Platform: android

Package: com.sophos.smsec

Version: 9.0.3000

SHA1 Hash: 6c5b7df8b50891edd38cd7360c28ec78306b4f9c

Size: 29 MB

Scan summary


Date: May 15, 2019, 4:04 p.m.

Vulnerability risk dashboard
Code coverage (% methods)

10000/115024 methods

Risk Title Short description
Medium Insecure Network Configuration Settings The application does not specify a network security configuration or sets insecure settings
Medium ELF binaries do not enforce secure binary properties Application do not enforce binary protections (ASLR, NX, RELRO, Stack canaries)
Potentially Use non-random initialization vector (IV) The client uses a non random hardcoded initialization vector.
Potentially Intent Spoofing The application is vulnerable to intent spoofing which may lead to inappropriate access
Potentially Insecure Shared Preferences Permissions Shared Preferences are set with insecure permissions (WORLD_READABLE or WORLD_WRITABLE)
Potentially Services declared without permissions Declared services are not protected with global permissions
Important Exported activites, services and broadcast receivers list List of all exported components (activities, services, broadcast receivers, content providers)
Info Call to Socket API List of Server Socket API calls
Info Application checks rooted device Presence of strings and methods indicating potential check for rooted device
Info Call to dangerous WebView settings API List of WebView API calls
Info Call to External Storage API List of external storage API calls
Info Call to Inter-Process-Communication (IPC) API List of Interp-Process Communication (IPC) calls
Info APK attack surface List of components potentially accepting user input
Info Virustotal malware analysis (MD5 based search) VirusTotal Malware analysis
Info Call to Android Security API List of Android Security API calls (Keystore and Keychain)
Info Call to logging API List of logging API calls
Info Application components list List application's components
Info Implementation of a FileObserver List of FileObserver implementation
Info Call to SSL/TLS API List of all files shipped in the application.
Info Call to dynamic code loading API List of dynamic code loading API calls
Info Call to Reflection API List of reflection API calls
Info Call to Random API List of random API calls
Info Call to Crypto API List of crypto API calls
Info Call to SQLite query API List of SQLite query API calls
Info Implementation of a WebViewClient List of WebViewClient implementation
Info Call to native methods List of native methods calls
Info Call to command execution API List of all command execution API calls
Info List of JNI methods List of JNI methods defined in ELF files and used by the application
Info Call to XML parsing API List of XML parsing API calls
Info APK files list List of all files shipped in the application.
Info Android Manifest APK Manifest in XML
Info Obfuscated methods List of code obfuscation status of all application\s componenets